Security Basics mailing list archives

order directive confusion


From: "SB CH" <chulmin2 () hotmail com>
Date: Thu, 04 Sep 2003 02:22:52 +0000

Hello, all.

When I use order directive at apache(httpd.conf), proftpd(proftpd.conf), some confusion.
When I set like this, I can connect to the directory.

<Limit GET>
 Order deny,allow
  allow from all
  deny from all
</Limit>

But I can't connect to the directory below set.

<Limit GET>
 Order allow,deny
  allow from all
  deny from all
</Limit>

the manual says like this.

deny,allow - Access is OK unless the client host matches the deny directive. allow,deny - Access is forbidden unless the client host matches the allow directive.
How an I understand the correct meaning of the order directive?


Thanks in advance.

_________________________________________________________________
책상위에 다리 올리고 느긋하게 즐긴다... MSN 온라인 상영관 http://vod.msn.co.kr

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


Current thread: